1. improved design of mail.html
2. implemented login security check (session stuff)
3. mail.html can now display a list of "mails" for the logged-in user
4. designed a "compose new mail" dialog (the logic behind is not implemented)